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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 


12/18/98 


b6 

b7C 


nr. 19/I i /Oft 


.date of birth 


for Harvard University 
Faculty of Arts and Sciences Computer S e-rvloes fFAS^ . Science 
Center, 1 Oxford Street, Cambridge, MA, 
interviewed at his place of business. 



was advised 


was 
of the 


nature of the interview and the identity of the interviewing 
agent. He provided the following information: 


__ advised that after 

having the graduate student who is responsible for the systems 
administration of the computer system named jsbach.harvard.edu 
with the IP address of 129.137.41.32, nothing suspicious was 
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OTHER Sealed Court Documents 


There were no suspicious logins or connections 
identified and no indication that the computer system had in fact 
been compromised. |_ 


isbach.harvard.edu is 


voa, currently at the 


be 

b7C 


advised 


that there had been some 


activity on a Chemistry Department computer that appeared to be 
compromised. A report was made by a student stating that the 
student had found a sniffer on the computer that had caught the 
students password. The student notified the FAS department who 
administers jsbach.harvard.edu and her password was changed. 
There were two terminal that were suspected, one being a PC and 
one a Macintosh computer. After a brief investigation, it was 
discovered that the activity was not a compromise, but actually 
generated by a Harvard researcher and student from local dialup 
accounts. The researcher and student were working with the 
Dudley Hirschbach Group. 
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ter , ^ 


investigation on 12/14/98 a t Cambridge, MA 
File# 288-CI-68562 
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This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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Continuation of FD-302 of 


, On 12/14/98 ,p age 


sensitive. |_|stated that there was information on the 

computer system that would be sensitive to the users. Lastly, 


gave an open invitation for any FBI employee interested 
in looking at the computer system to come to Harvard University 
and do so. 


advised that 


employs “TCP” wrappers on 
jsbach.harvard.edu to restrict logins. It is possible that an 
older user might have been able to gain access to the system 
through an old account and password in existence prior to 

Htakinq over the system administration for thifj compute^ 

system. | \ stated that this was highly unlikely. |_ 

also stated that it was possible that an existing user could have 
manipulated the computer system but again this was highly 
unlikely. 


E 


stated that neither he nor 


Icn nld find 


hat the computer system had been compromised. _ 

if there were still suspicions that the Harvard 


any sign 

also advised that _ _ 

staff had missed anything or if the case agent desired, [ 


] 


would contact his Unix specialist who could conduct extensive 

research into the jsbach.harvard.edu computer to attempt to_ 

identify any intrusions. At the time of the interview,!_ 

stated that he had no justification to request this type of 
manpower and time expenditure unless a specific compromised 
account could be identified or the examination was specifically 
requested by the FBI. 


any activity that had been 


According to |_ 

identified as suspici ous, has been traced back to legitimate o r 
explainable sources. I I 
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